DoQ (DNS-over-QUIC) - superior, faster, and more private version of the DNS protocol

guest · Dec 17, 2020

Ad-blocker AdGuard deploys world's first DNS-over-QUIC resolver
DNS-over-QUIC, or DoQ, is viewed as a superior, faster, and more private version of the DNS protocol, even DoH and DoT
December 17, 2020
https://www.zdnet.com/article/ad-blocker-adguard-deploys-worlds-first-dns-over-quic-resolver/

Ad-blocker company AdGuard has deployed on Wednesday the world's first-ever DNS-over-QUIC (DoQ) resolver into a production environment as part of the company's Android and iOS applications.

AdGuard's DoQ resolver will work by resolving its users' DNS queries (converting website URLs into IP addresses) using the new QUIC data transfer protocol.
Click to expand...

DOQ REPLACES UDP WITH QUIC INSIDE DNS' UNDERBELLY
The problem is that UDP traffic is not encrypted and is available in clear text to any network observer, making it easy for ISPs to track even encrypted HTTPS traffic by looking at the DNS queries proceeding those connections.

DoQ is currently viewed as the future of DNS encryption because it doesn't bother with playing tricks with adjacent technologies in the "application layer" of the internet protocol suite.
Instead, it replaces the old UDP with the newer QUIC, a layer below DNS, as its underlying technology, effectively giving DNS an upgrade to modern technology.
Click to expand...

The protocol is currently only a working draft at the Internet Engineering Task Force (IETF), but AdGuard says there is no reason to wait to start experimenting and providing this better and more private version of the DNS protocol to its users.
Click to expand...

guest · Dec 17, 2020

AdGuard becomes the world's first public DNS-over-QUIC resolver!
December 15, 2020
https://adguard.com/en/blog/dns-over-quic.html

AdGuard DNS is the first public DNS resolver to support the new DNS-over-QUIC protocol! We believe that DNS-over-QUIC (or simply DoQ) is the future of DNS encryption and we're extremely proud be the first to present you with the opportunity to try it out.

I'll kick off this article by explaining what DoQ is, then I'll cover its advantages compared to the alternatives, talk about whether there are any drawbacks or not, and finally give you a step-by-step instruction how to set it up.
Click to expand...

DNS-over-QUIC
DNS-over-QUIC is a DNS protocol that takes advantage of the QUIC transport layer protocol and uses it to transmit DNS requests. Currently the DoQ standard is in the draft stage, but it doesn't prevent us from experimenting with it.
Why not DNS-over-HTTPS
It gets more complicated here: at one point DNS-over-HTTPS will also support QUIC, thanks to the future employment of HTTP/3 protocol that was built around QUIC. And this raises more questions: why do we need DoQ at all in this case?

There are, in fact, several reasons, but they all stem from the single fact that HTTP is not a transport layer protocol. It was designed for different reasons, and while it can serve as a substitute for a proper transport protocol, this would raise a lot of unnecessary risks. Specifically in privacy area, using HTTP to transfer DNS requests will lead to: [...]
Click to expand...

Stefan Froberg · Dec 19, 2020

Encryption needs reliability. If you throw that away then you have already failed.

QUICK as encryption scheme is totally useless just like Datagram Transport Layer Security was.

Sure, its faster than DoH (or even DoT) but if you check the specs, what you trading is increased performance for reliability of encryption, inheriting all the problems of similar UDP protocol (no reliability, ease of spoofing, etc...)

imdb · Oct 7, 2022

Some might say there's a possibility QUIC will start to replace TCP. This week I want to argue that QUIC is actually solving a different problem than that solved by TCP, and so should be viewed as something other than a TCP replacement.
Click to expand...

If you need a TCP replacement, you won't find a QUIC one by Bruce Davie

Log in or Sign up

DoQ (DNS-over-QUIC) - superior, faster, and more private version of the DNS protocol

guest Guest

guest Guest

Stefan Froberg Registered Member

imdb Registered Member

Log in or Sign up

DoQ (DNS-over-QUIC) - superior, faster, and more private version of the DNS protocol

guest Guest

guest Guest

Stefan Froberg Registered Member

imdb Registered Member

Useful Searches